Link to the workflow.
This workflow demonstrates how to suppress alerts by marking them as dismissed. Explanation:
  • Trigger: Activated by any alert.
  • Action: Enrich the alert by adding a dismissed field with the value true.
workflow:
  id: autosupress
  description: demonstrates how to automatically suppress alerts
  triggers:
    - type: alert
  actions:
    - name: dismiss-alert
      provider:
        type: mock
        with:
          enrich_alert:
            - key: dismissed
              value: "true"